exchange tracking logs recipient empty
Posted on 2014-10-31
I have just been given a set of message tracking logs (from a 2010 exchange server) and this is the first time I have dealt with such logs. The logs seem to be in comma separated format, so I have imported one of the logs into excel to see what information they give you. However one thing I noticed, is the recipient address is always empty in every row of data! Is this normal? The sender address is always populated, but it only seems to be that of internal employees. I was hoping the logs would have information coming into and going out of the organisation, i.e. external email addresses as well. Do these logs not work in that way?